fN THE CLAIMS: 

Please amend claims 12, 13 and 18-31 as follows: 

1 . (Original) An apparatus for processing a security setup control message in a 
mobile communication system, the apparatus comprising: 

means for verifying the integrity of the message wherein the value of at least one 
security variable is updated with new security setup information if the message is verified and 
the value of the security variable remains unchanged if the message is not verified. 

2. (Original) The apparatus of claim 1 , further comprising means for storing the 
previous value of the security variable before it is updated with new security setup information. 

3. (Original) The apparatus of claim 2, wherein the means for storing the previous 
value of the security variable comprises a memory unit. 

4. (Original) The apparatus of claim 2, wherein the means for storing the previous 
value of the security variable comprises a shift register. 

5. (Original) The apparatus of claim 1 , wherein the means for verifying the integrity 
of the message comprises a processor. 

6. (Original) The apparatus of claim 1 , wherein the means for verifying the integrity 
of the message comprises software stored on recording media. 

7. (Original) The apparatus of claim 1 , wherein the new security setup information is 
extracted from the message. 

8. (Original) The apparatus of claim 1, wherein the apparatus is located in UE. 

9. (Original) The apparatus of claim 1, wherein the apparatus is located in the 
UTRAN. 
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10. (Original) The apparatus of claim 1, wherein the means for verifying the integrity 
of the message is adapted to generate an authentication value related to the message. 

11. (Original) The apparatus of claim 10, wherein the means for verifying the 
integrity of the message comprises a standardized integrity check authentication generation 
algorithm. 

12. (Currently amended) A method for processing a security setup control message in 
a mobile communication system, the method comprising the steps of: 

verifying the integrity of the message; and 

processing the message and updating the value of at least one security variable with new 
security setup information if the message is verified and discarding the message and leaving the 
value of the at least one security variable unchanged if the message is not verified. 

13. (Currently amended) The method of claim 12, further comprising storing the 
previous value of the at least one security variable before it is updated with new security setup 
information. 

14. (Original) The method of claim 12, further comprising extracting the new security 
setup information from the message. 

1 5. (Original) The method of claim 12, further comprising generating an expected 
authentication value related to the message. 

16. (Original) The method of claim 15, further comprising performing a standardized 
integrity check authentication generation algorithm. 

17. (Original) The method of claim 15, further comprising comparing the expected 
authentication value to a received authentication code. 
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18. (Original) The method of claim 17, wherein the message is processed if the 
received message authentication code is equal to the expected message authentication value and 
the message is discarded if the received message authentication code is not equal to the expected 
message authentication code, 

4-S19. (Currently amended) The method of claim 4412, wherein the message is an RRC 
(radio resource control) message. 

+920. (Currently amended) The method of claim 44J_2 5 wherein the message is a 
signaling message. 

3021. (Currently amended) An mobile station for processing a security setup control 
message in a mobile communication system, the mobile station comprising: 
an RF module; 

a power management module; 

an antenna; 

a battery; 

a keypad; 

a memory unit; 

a speaker; 

a microphone; and 

a processing unit adapted to verify the integrity of the message wherein the value of at 
least one security variable is updated with new security setup information if the message is 
verified and the value of the at least one security variable remains unchanged if the message is 
not verified. 

2+22. (Currently amended) The mobile station of claim 2021, wherein the memory unit 
is adapted to store the previous value of the at least one security variable before it is updated with 
new security setup information. 
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2323. (Currently amended) The mobile station of claim 2+22, wherein the memory 
unit comprises a shift register. 

2^24. (Currently amended) The mobile station of claim 2021, wherein the memory 
unit comprises a flash memory. 

2425. (Currently amended) The mobile station of claim 2021, wherein the memory 
unit comprises a ROM. 

2526. (Currently amended) The mobile station of claim 2021, wherein the memory 
unit comprises an SRAM. 

2627. (Currently amended) The mobile station of claim 2021, wherein the processing 
unit comprises a microprocessor. 

2728. (Currently amended) The mobile station of claim 2021, wherein the processing 
unit comprises software stored on recording media. 

2&29. (Currently amended) The mobile station of claim 2021, wherein the new security 
setup information is extracted from the message. 

2930. (Currently amended) The mobile station of claim 2021, wherein the processing 
unit is adapted to generate an authentication value related to the message. 

3031. (Currently amended) The mobile station of claim 2930, wherein the processing 
unit comprises a standardized integrity check authentication generation algorithm. 

3+32. (Currently amended) The mobile station of claim 2021, further comprising a SIM 

card. 
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